Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa
File: L5Ublefnfnz_gofQY52V2qw1Pls.roa (raw, json)
Hash identifier: Si1K+rGXCNFSOMCCgrCNdNy7O2f2HbKt9ag16/wCgdU=
Subject key identifier: 2F:95:1B:95:E7:E7:7E:7C:FF:82:87:D0:63:9D:95:DA:AC:35:3E:5B
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018967C5EB0556E2B6B10E6F489F01979D60
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa
Signing time: Tue 18 Jul 2023 06:52:51 +0000
ROA not before: Tue 18 Jul 2023 06:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:c5:eb:05:56:e2:b6:b1:0e:6f:48:9f:01:97:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 18 06:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f951b95e7e77e7cff8287d0639d95daac353e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:32:a9:b1:cf:58:21:8d:d4:56:2b:73:be:
50:4e:67:c8:9c:e0:e7:c6:69:5c:00:e6:8d:cc:bf:
90:a9:59:d4:fa:8f:cd:25:71:ab:70:d5:ee:61:46:
52:da:4a:0c:92:58:0a:13:64:67:34:32:31:5c:2c:
13:25:85:8f:3c:a9:92:97:16:b5:b4:a5:93:bb:42:
6d:38:77:07:29:dd:5d:bc:9c:47:fb:ba:9d:69:2d:
cf:4d:09:5f:a2:ff:ea:2b:6c:8b:14:2e:af:2e:1b:
02:89:05:1a:25:e2:16:be:be:61:5a:d4:8c:1c:25:
10:35:08:ee:15:c3:9b:28:60:15:e6:9e:02:0f:04:
fc:17:42:69:d8:13:e2:7c:73:45:6f:87:10:c2:c3:
a2:11:b8:5f:90:f0:ca:82:8f:7f:63:a5:97:fe:f7:
98:43:b4:a3:3f:62:b6:56:7b:dd:e6:16:a9:b4:18:
69:c2:f4:d2:f6:60:87:15:43:61:4c:69:4b:65:aa:
8e:43:41:97:6a:9f:80:53:d6:ef:3d:d5:d8:d0:e2:
7d:5c:da:ac:e7:b1:2d:2a:c8:96:e8:bf:2a:77:15:
97:76:54:1a:62:95:f8:ae:f5:41:cc:94:7a:51:be:
33:41:3f:b1:df:0b:83:6c:d1:16:36:1f:73:27:f3:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:1B:95:E7:E7:7E:7C:FF:82:87:D0:63:9D:95:DA:AC:35:3E:5B
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/L5Ublefnfnz_gofQY52V2qw1Pls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8f:59:bb:fe:9f:1e:92:c0:ac:4c:01:f0:f4:51:13:d3:51:
fa:f8:f2:9b:21:db:aa:83:be:bb:73:56:8c:75:0e:6f:90:b1:
df:68:72:d5:4a:f2:6e:77:95:a5:a6:ee:9f:fe:9d:ff:2d:26:
12:bc:70:28:52:85:8c:d7:9c:10:d5:21:d2:8a:2f:9d:aa:11:
16:13:b1:ee:cc:30:d2:ed:8d:d1:2b:79:d2:d5:a9:47:58:f0:
40:f7:d1:35:b6:88:d4:84:2d:1d:a8:06:64:fd:85:e2:6c:99:
45:1f:fa:07:89:a3:64:61:3e:d1:21:0a:44:e4:7c:00:4d:37:
59:44:3a:55:b0:ca:f1:f7:75:2a:bb:dd:c4:cc:1e:c5:b5:ce:
c0:ce:92:d0:1b:ab:01:9b:ae:35:3e:f9:ab:87:57:9a:2a:fa:
49:aa:df:54:64:da:b7:cf:cf:1a:be:22:09:58:bf:5a:1d:8f:
73:aa:47:30:68:6e:e5:57:2b:4d:f9:4f:a1:10:8d:9f:6b:bf:
22:9f:5b:67:e9:57:4f:e6:31:b5:c3:3f:4f:f1:53:03:94:0a:
81:bc:85:b8:c3:e2:1c:2d:14:2a:d2:75:3d:32:dd:9f:cb:0f:
f9:cd:a5:33:25:7d:8a:20:c3:ae:8b:95:ef:6d:a3:fa:ac:25:
af:36:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org